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Title: (S/NF/OC) sMREEF ABDULMUTTALEB El-ARBI (USPER) 

I T~IJB:L/AL-QAEDA- 



(S/HF/OG) D^ 

DecJ 


.Details: }^NF/OC) I ~l became a subjeG t of interest to the FBI 

San Diego Of fice subs ecfaent to the arrest of I I . 

I I and I I surfaced out of the investigation from the • 

09/11/2001, attacks because' of th'eir a:ssociation to the hijackers, 
Kawaf Al-Hazmi and.Khalid Almihdhar on Flight 77. 

background, on 09/11/2001, American Airlines 
representatives provided to'FBI Headquarters the passenger manifest 
for American'Airlines Flight #77 . The names Na'waf Al-Hazmi and Khalid 
Al-Midhar were included on the passenger manifest. ■ 

^ 09/12/2001, the Washingt^^ Field Office of ' 

the’ FBI was liiobified by the Dulles Airport Police that a suspiclo'us 
' vehicle was'found at'the Dulles International Airpoft located in the 
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SICRIT/NOFORN/ORGON 


TO:: San Diego 

.Rs'l-..ISv^HE/QG). 


^ Trr\rr> • 




ULoj^lq 

02/Q4/2003 


Hourly Lot, Row G, Herndon, Virginia, 
described as a 1998 Toyota. 


The suspicious vehicle was 


(U) 


/MF/oe) Department of Motor Vehicle (DMV) records 
determined the 198 8 Toyota, with California liGense plates, ■ Vehicle 
Identification Number JT2AE92E9J3137546, was’ registered to Kawaf. Al- 
Hazmi, 8451 Mt. Vernoh Way, Lemon Grove, California. ' 

jS^/NF/OC) The vehicle was searched by agents. and found 
contain a med inal nrearriritinn for Khalid Al-Midhar, from I 


to ■ 


it 


San Diego, California, a receipt for 
car service, at caiirornia Motor Works, San Diego, California, signed, 
by Khalid Al-Midhar,' and an insurance card for Khalid Al-Midhar . 
Subsequent investigation determined that both Al-Hazmi and Al-Midhar 
resided in'San Diego in 1999 and 20OQ. 

t^/NF/OC) Also found du ring the search o f .Al-Hazmi's 
vehicle was.ia piece of paper with I ~l written on it . 

Subseq uent searc h 'of telephone dat abases revealed that the telep hone 


[ 


numb er f 


was subscribed to 


(U) 

interviewe 


^/MF/OG) Qn 09/20/2001, FBI agents located 
in'La Mesa, Galifornia.F 


and 



^'NF/OC) Investigation by FBI determined that 


helped acciiraate Al-Hazmi and Al-Midhar to the San Diego area and 
provided assistance with their travel arran'3®®®^^® flight lessons 
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(U) On 09/2'W2^0^^^ was arrested on a 

Material Witness warrant for Penttbomb issued, out of the Southern 
.District of New York, after he declined to take awpoly 
exaitiination, hthdullah's vehicle was suhsequently seized. During the 
inventory search, a spiral notebook was obtained, which referenced 
planes falling from the skv, mass killings and hijacking. 

■ iUI ^^^^-n 
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(^NF/OC) As background, on 09/11/2001, American Airlines 
representatives provided to FBI Headquarters the passenger manifest 
for American Airlines Flight #77. The names Nawaf Al-Hazmi and Khalid 
Al-Midhar were included on the passenger manifest. 

^^NF/OC) On 09/12/2001, the Washington Field Office of 
the FBI was notified by the Dulles Airport Police that a suspicious 
vehicle was found at the Dulles International Airport located in the 
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To: sS^ Diego 
Re: ^/NF/OC) 


From: San Diea o 

02/04/2003 


(U) 


(U) 


(U) 


(U) 


Hourly Lot, Row G, Herndon, Virginia. The suspicious vehicle was 
described as a 1998 Toyota. 

^}^NF/0C) Department of Motor Vehicle (DMV) records 
determined the 1988 Toyota, with California license plates, Vehicle 
Identification Number ■JT2AE92E9J3137546, was registered to Nawaf Al- 
Hazmi, 8451 Mt. Vernon Way, Lemon Grove, California. 


NF/OC) The vehicle was searched by agents and—foiiod—LQ__ 

contain a medical prescription for Khalid Al-Midhar, from]_ 

_I San Diego, California, a receipt for 

car service at California Motor Works, San Diego, California, signed 
by Khalid Al-Midhar, and an insurance card for Khalid Al-Midhar. 
Subsequent investigation determined that both Al-Hazmi and Al-Midhar 
resided in San Diego in 1999 and 2000. b6 


:b7C 


NF/OC) Also found du ring the search o f Al-Hazmi's 


vehicle was a piece of paper with 
Subsequent search of telephone databases revealed 
number 589-5316 was subscribe d to 


written 
that the 


on It. 
telephone 


^ '^NF/OQ On 0 9/20/2 001, FBI agents located and 
interviewe'^ r~ ] Calif ornia. I k dmitted that 

he was associated with telephone number ^ 


[ 


advised that he was enroll ed at Grossmon t College. Investigation at 
Grossmont College revealed I bollegiate email address as 


as an additional email account on his student record 


(U) 


/NF/OC) 


provided the FBI with consent to search 
The search uncovered a box-cutter and 

A 


his residence and computer 

several computer-generated photographs of Usama Bin Laden 
subsequent search of the computer by the San Diego Regional Computer 
Forensics Laboratory (RCFL) revealed sev eral occurrences of email 
addresses, | I and 


address 


I It also revealed email messages from 
nnm-nnbp-T- gp?iT-r-h also revealed an email 
_ 


Jto email account. 


ss3000@hotmail.com. On 10/30/2000 with the subject stating: "I'm very 
very sorry." The FBI has determined that Al-Hazmi utilized the 
ss3000@hotmail.com account in late 2000 through early March 2001. 

i^NF/OC) Investigation by FBI determined that Abdullah 
helped acclimate Al-Hazmi and Al-Midhar to the San Diego area and 
provided assistance with their travel arrangements and flight lessons 
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To: 

Re: 

(U) 


San Diego From: 
W/NF/OC) ' 


San Dieg o 

02/04/2003 


(U) 




(U) 


(U) 


while in San Diego. In early 2001, Al-Hazmi telephonically contacted 
Abdullah and informed him that Al-Hazmi was in Arizona attending 
flight school. 

''j^NF/OC) Abdullah provided the FBI consent £o search his 
residence, resulting in the seizure of his personal computer, located 
Abdullah's rnmnnter was an email message dated 09/13/2001, fi"om 


There appeared to be an anti-American bi^^'^^^d 
tone to tne message, as it queried, "Is it the same nation that waS 
the only nation in history to use atomic weapons in anger...Does this 
hypocrite nation have the right to call anyone a terrorist just 
because they condemn its unjust practices?" 


NF/OC) A review o f Abdullah's computer by San Diego 
RCFL revealed I I checked his email from Abdul lah's 

computer and that I 


"bent several emails to Abdullah, 


directory torj^ 


i ape lea "My Document s,| 


in 2001. A home 


Phone 


List," was located on Abdullah's computer. Within this directory were 
the following names and telephone numbers: 



email from the 


received 
Holy Land 


(A^NF/OC) On 09/11/2000,_ 

"a note of appreciation and thanks"’’' 

Foundation. jtji \/ 

jX/NF/OC) FBI investigation at Grossmont 
College also revealed that email address, MOHDAR78(^HOTMAIL.COM, was 
provided by Mohdar Abdullah as a point of contact. Grossmont College 
further provided the Abdullah's collegiate email address is listed as 
MOHDARABDULLAHPSTUDENTS.GCCCD.NET. 


jX/NF/OC) 


On 09/21/2001, Mohdar Abdullah was arrested on a 
Material Witness warrant for Penttbomb issued out of the Southern 
District of New York, after he declined to take a polygraph 
examination. Abdullah's vehicle was subsequently seized. During the 
inventory search, a spiral notebook was obtained, which referenced 
planes falling from the sky, mass killings and hijacking. 




NF/OC) On 09/22/2001, agents obtained and executed a 
sealed fede ral search warrant for the current residence of Mohdar 
Abdullah at I I California. 


Abdullah was renting a room from 


and resided with 
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Re : 



Diego From: 
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San Diego 
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02/04/2003 


(U) 


be 

b7C 

bS 6e FRCP 


him and his two sons, 

(U) Y 

/^/NF/OC) On 10/01/2001, the results of a court order 
were received by the FBI pertaining to Mohdar's email address, 
identified as mohdar78(^hotmail. com. MSN Hotmail provided information 
that disclosed mohdar78@hotmail.com had activity from 08/15/1998 to 
09/26/2001. 

(U) _ ; ^^NF/OC) According to I I 


Vas studying Arabic s tudies at a University, (name unknown to 




CJ) 



(U 
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for American Airlines Flight #77. The names Nawaf Al-Hazmi and Khalid 
Al-Midhar were included on the passenger .manifest. 

^/NF/OC) On 09/12/2001, the Washington Field Office of 
the FBI was notified by the Dulles Airport Police that a suspicious 
vehicle was found at the Dulles International Airport located in the 
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To: 
Re: 


Diego 
(/NF/OC) 


From: 


!U) 


San Diego 

02/04/2003 


Hourly Lot, Row G, Herndon, Virginia. The suspicious vehicle was 
described as a 1998 Toyota. 

"}^NF/0C) Department of Motor Vehicle (DMV) records 
determined the 1988 Toyota, with California license plates. Vehicle 
Identification Number JT2AE92E9J3137546, was registered to Nawaf Al- 
Hazmi, 8451 Mt. Vernon Way, Lemon Grove, California. 


r 


M/NF/OC) The vehicle was searched by agents an d found to 
contain a medical prescription for Khalid Al-Midhar, from 


car service at 


a receipt for 


San Diego, California, signed 
by Khalid Al-Midhar,.and an insurance card for Khalid Al-Midhar. 
Subsequent investigation determined that both Al-Hazmi and Al-Midhar 
resided in San Diego in 1999 and 2000. 


(U) 


NF/OC) Also found du ring the search of Al-Hazmi's 


vehicle was a piece of paper with 


b6 

b7C 


written on it. 


Subsequent sear ch of telephone da tabases revealed that the telep hone 
was subscribed to 


(U) 


/NF/OC) On 09/20/2001, FBI agents located and 


interviews 

he was associated with telephone number 
advised that he was enroll ed at Grossmp nt College. Investigation at 


admitted that 

] 


Grossmont College revealed 


collegiate email address as 


as an additional email account on his student record 




provided the FBI with consent to search 
his residence and computer. The search uncovered a box-cutter and 
several computer-generated photographs of Usama Bin Laden. A 
subsequent search of the computer by the San Diego Regional Computer 
Forensics Laboratory (RCFL) revealed sev eral occurrences of email 
addresses. | l and 


address 


L 


X 


It also revealed email messages from 

also revealed an email 
to email account, 


pn 10/30/2000 with the subject stating: "I'm very 


very sorry." The FBI has determined that Al-Hazmi utilized the 
ss3000@hQtmail.com account in late 2000 through early March 2001. 

(U) ;/NF/0C) Investigation by FBI determined that Abdullah 

helped acclrmate Al-Hazmi and Al-Midhar to the San Diego area and 
provided assistance with their travel arrangements and flight lessons 
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To: San Diego 

Re: ^/NF/OC) 

<U)^ 


From: 


SECi^T/NOFORN/ORCON 

San Diego 

02/04/2003 


while in San Diego. In early 2001, Al-Hazmi telephonically contacted 
Abdullah and informed him that Al-Hazmi was in Arizona attending 
flight school. 

^^NF/OC) Abdullah provided the FBI consent to search his 
residence, resulting in the seizure of his personal computer, located 
on Abdullah's computer was an email message dated 09/13/2001, from 

\ _ There appeared to be an anti-American biased 
tone to the message, as it queried, "Is it the same nation that was 
the only nation in history to use atomic weapons in anger...Does this 
hypocrite nation have the right to call anyone a terrorist just 
because they condemn its unjust practices?" 

^ NF/OC) a 

RCFL revealed 


computer and that 


review of Abdullah's computer by San Diego 
checked his email from Abdul lah's 
several emails to Abdullah, 
and Omar Al-Bayoumi in 2001. A home 


sent 


Jhone 


directory fo d 

List," was located on Abdullah's computer. Within this directory were 
the following names and telephone numbers: 


(U) 





received 


^^NF/OC) On 09/11/2000, __ 

"a note of^appreciation and thanks" email from the" Holy Land 
Foundation. \/ 

Ce^F/OC) FBI investigation at Grossmont 
College also revealed that ^ail address, MOHDAR78PHOTMAIL.COM. was 
provided by Mohdar Abdullah as a point of contact. Grossmont College 
further provided the Abdullah's collegiate email address is listed as 
MOHDARABDULLAHPSTUDENTS.GCCCD.NET. 


(U) 


X/^ 


!/NF/0C) On 09/21/2001, Mohdar Abdullah was arrested on a 
Material witness warrant for Penttbomb issued out of the Southern 
District of New York, after he declined to take a polygraph 
examination. Abdullah's vehicle was subsequently seized. During the 
inventory search, a spiral notebook was obtained, which referenced 
planes falling from the sky, mass killings and hijacking. 

)^/NFy0C) On 09/22/2001, agents obtained and executed a 
sealed federal search warrant for the current residence of Mohdar 
Abdullah at 1415 East Lexington Avenue. #146. El Caio n. California. 
Abdullah was renting a room from I and resided with 
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